penetration-testing-with-strix
Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix
by usestrixFree
Description
penetration-testing-with-strix is the main Strix skill for running an autonomous AI pentest of a web app, API, codebase, repository, URL, domain or IP. Strix runs agents that exploit a target dynamically and report only findings validated with a working proof of concept. It describes two ways to run it on the same engine, which produce the same findings. The open-source CLI runs on your machine in a Docker sandbox with your own LLM key, is free, fully local, and can run air-gapped. The managed cloud runs on Strix's infrastructure, driven from the same strix cloud commands or the REST API, with no Docker, no LLM key and no local compute, and it adds team dashboards, scheduling, pull request reviews, downloadable PDF and DOCX reports on the Enterprise plan, and connectors to internal networks. The skill tells the assistant to decide between the two based on the situation rather than default to one, and it says neither is better in general. Use it when you need a pentest and want to pick the route; the other Strix skills cover the specific cases. Only test targets you own or are authorized to test. It passes Gen Agent Trust Hub on skills.sh, and Socket and Snyk show warnings. It has about 13,900 installs. Install it with npx skills add https://github.com/usestrix/strix --skill penetration-testing-with-strix.…
Highlights
- Autonomous AI pentest of a URL, app, API, repo or host
- Reports only findings validated with a working proof of concept
- Open-source CLI in Docker with your own LLM key
- Managed cloud with no Docker or LLM key, plus team features
Ratings & Reviews
No ratings yet
Be the first to rate penetration-testing-with-strix.
People also visit
penetration-testing-with-strix FAQ
What does Strix test?
A web app, API, codebase, repository, URL, domain or IP.
Does it report unverified issues?
No. It reports findings validated with a working proof of concept.
Which route is free?
The open-source CLI is free and runs on your machine with your own LLM key. The managed cloud is a hosted service that runs on Strix's infrastructure.
Which route should I pick?
The skill says to decide per situation. The CLI is fully local, and the cloud needs no Docker or LLM key and adds team dashboards.
How do I install it?
Run npx skills add https://github.com/usestrix/strix --skill penetration-testing-with-strix.
What are the best penetration-testing-with-strix alternatives?
Popular alternatives to penetration-testing-with-strix include managed-pentesting-with-strix, security-audit and api-security-testing. See all penetration-testing-with-strix alternatives